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© Psychology 


A New Kind of SIGDEV 


Establishing the Human Science Operations Cell 


One of the many pressing stories that remains to be told from the 


Snowden archive is how western intelligence agencies are attempting to 
manipulate and control online discourse with extreme tactics of 
deception and reputation-destruction. It’s time to tell a chunk of that 
story, complete with the relevant documents. 


Over the last several weeks, I worked with NBC News to publish a series 
of articles about “dirty trick” tactics used by GCHQ’s previously secret 
unit, JTRIG (Joint Threat Research Intelligence Group). These were based 
on four classified GCHQ documents presented to the NSA and the other 
three partners in the English-speaking “Five Eyes” alliance. Today, we at 
the Intercept are publishing another new JTRIG document, in full, 
entitled “The Art of Deception: Training for Online Covert Operations.” 


By publishing these stories one by one, our NBC reporting highlighted 
some of the key, discrete revelations: the monitoring of YouTube and 
Blogger, the targeting of Anonymous with the very same DDoS attacks 
they accuse “hacktivists” of using, the use of “honey traps” (luring 
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people into compromising situations using sex) and destructive viruses. 
But, here, I want to focus and elaborate on the overarching point 
revealed by all of these documents: namely, that these agencies are 
attempting to control, infiltrate, manipulate, and warp online 
discourse, and in doing so, are compromising the integrity of the 
internet itself. 


Among the core self-identified purposes of JTRIG are two tactics: (1) to 
inject all sorts of false material onto the internet in order to destroy the 
reputation of its targets; and (2) to use social sciences and other 
techniques to manipulate online discourse and activism to generate 
outcomes it considers desirable. To see how extremist these programs 
are, just consider the tactics they boast of using to achieve those ends: 
“false flag operations” (posting material to the internet and falsely 
attributing it to someone else), fake victim blog posts (pretending to be 
a victim of the individual whose reputation they want to destroy), and 
posting “negative information” on various forums. Here is one 
illustrative list of tactics from the latest GCHQ document we’re 
publishing today: 
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SECRET//SI//REL TO USA, FVEY 


DISRUPTION 
Operational Playbook 


e Infiltration Operation 

e Ruse Operation 

e Set Piece Operation 

e False Flag Operation 

e False Rescue Operation 
e Disruption Operation 

* Sting Operation 


SECRET//SI//REL TO USA, FVEY 


Other tactics aimed at individuals are listed here, under the revealing 
title “discredit a target”: 


Discredit aittarget 


@ Set up a honey-trap 
@ Change their photos on social networking sites 


@ Write a blog purporting to be one of their 
victims 


è Email/text their colleagues, neighbours, friends 
etc : 


—— _— 
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Then there are the tactics used to destroy companies the agency targets: 


Discredit a company. 


è Leak confidential information to companies / 
the press via blogs etc 


® Post negative information on appropriate 
forums 


® Stop deals / ruin business relationships 


GCHQ describes the purpose of JTRIG in starkly clear terms: “using 
online techniques to make something happen in the real or cyber 
world,” including “information ops (influence or disruption).” 
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EFFECTS: Definition M 


- Information Ops (influence or disruption) 
- Technical disruption 


Critically, the “targets” for this deceit and reputation-destruction 


extend far beyond the customary roster of normal spycraft: hostile 
nations and their leaders, military agencies, and intelligence services. In 
fact, the discussion of many of these techniques occurs in the context of 
using them in lieu of “traditional law enforcement” against people 
suspected (but not charged or convicted) of ordinary crimes or, more 
broadly still, “hacktivism”, meaning those who use online protest 
activity for political ends. 


The title page of one of these documents reflects the agency’s own 
awareness that it is “pushing the boundaries” by using “cyber offensive” 
techniques against people who have nothing to do with terrorism or national 
security threats, and indeed, centrally involves law enforcement agents 
who investigate ordinary crimes: 
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Cyber Offsensive Session: 
Pushing the Boundaries and 
Action Against Hacktivism 


[NAME REDACTED |- Serious Crime Effects, GCHQ 
-JTRIG, GCHQ 


TOP SECRET//COMINT//REL AUS/CAN/NZ/UK/US 


No matter your views on Anonymous, “hacktivists” or garden-variety 
criminals, it is not difficult to see how dangerous it is to have secret 
government agencies being able to target any individuals they want - 
who have never been charged with, let alone convicted of, any 
crimes — with these sorts of online, deception-based tactics of 
reputation destruction and disruption. There is a strong argument to 
make, as Jay Leiderman demonstrated in the Guardian in the context of 
the Paypal 14 hacktivist persecution, that the “denial of service” tactics 
used by hacktivists result in (at most) trivial damage (far less than the 
cyber-warfare tactics favored by the US and UK) and are far more akin to 
the type of political protest protected by the First Amendment. 


The broader point is that, far beyond hacktivists, these surveillance 
agencies have vested themselves with the power to deliberately ruin 
people’s reputations and disrupt their online political activity even 
though they’ve been charged with no crimes, and even though their 
actions have no conceivable connection to terrorism or even national 
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security threats. As Anonymous expert Gabriella Coleman of McGill 
University told me, “targeting Anonymous and hacktivists amounts to 
targeting citizens for expressing their political beliefs, resulting in the 
stifling of legitimate dissent.” Pointing to this study she published, 
Professor Coleman vehemently contested the assertion that “there 
is anything terrorist/violent in their actions.” 


Government plans to monitor and influence internet communications, 
and covertly infiltrate online communities in order to sow dissension 
and disseminate false information, have long been the source of 
speculation. Harvard Law Professor Cass Sunstein, a close Obama 
adviser and the White House’s former head of the Office of Information 
and Regulatory Affairs, wrote a controversial paper in 2008 proposing 
that the US government employ teams of covert agents and 
pseudo-”independent” advocates to “cognitively infiltrate” online 
groups and websites, as well as other activist groups. 


Sunstein also proposed sending covert agents into “chat rooms, online 
social networks, or even real-space groups” which spread what he views 
as false and damaging “conspiracy theories” about the government. 
Ironically, the very same Sunstein was recently named by Obama to 
serve as a member of the NSA review panel created by the White House, 
one that - while disputing key NSA claims - proceeded to propose many 
cosmetic reforms to the agency’s powers (most of which were ignored 
by the President who appointed them). 


But these GCHQ documents are the first to prove that a major western 
government is using some of the most controversial techniques to 
disseminate deception online and harm the reputations of targets. 
Under the tactics they use, the state is deliberately spreading lies on the 
internet about whichever individuals it targets, including the use of 
what GCHQ itself calls “false flag operations” and emails to people’s 
families and friends. Who would possibly trust a government to 
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exercise these powers at all, let alone do so in secret, with virtually no 
oversight, and outside of any cognizable legal framework? 


Then there is the use of psychology and other social sciences to not only 
understand, but shape and control, how online activism and discourse 
unfolds. Today’s newly published document touts the work of GCHQ’s 
“Human Science Operations Cell,” devoted to “online human 
intelligence” and “strategic influence and disruption”: 


SECRET//SI//REL TO USA, FVEY 


an 


Èo SCIENCE OPERATIONS CEU 
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SECRET//SI//REL TO USA, FVEY 


Online} Strategic 
HUMINT] Influence 


JTRIG 


Disruption 
and CNA 
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Under the title “Online Covert Action”, the document details a variety 
of means to engage in “influence and info ops” as well as “disruption 

and computer net attack,” while dissecting how human beings can be 
manipulated using “leaders, 


99 6c 99 6c 


trust,” “obedience” and “compliance”: 
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ACNO Key 
Skill 


Strands 


Individual 


Global 


Skill Strands 
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Performance 
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Influence & 


Ciia | 


Magic Techniques & Experiment 


Psychology 


Decisions 
(Emotional 
not rational) 


Individual 


l 
| 


Hofstede 
Dimensions 


=m PC 


Global 
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The documents lay out theories of how humans interact with one 
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another, particularly online, and then attempt to identify ways to 
influence the outcomes — or “game” it: 


SECRET//SI//REL TO USA, FVEY 
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Mi | rro ri n g People copy each other while in social interaction with them. 


body language 
language cues 
expressions 
eye movements 
emotions 


Accommodation 


Adjustment of speech, patterns, and language towards another person in communications 
People in conversation tend to converge 
Depends on empathy and other personality traits 
Possibility of over-accommodation and end up looking condescending 


M l I Y | IC ry adoption of specific social traits by the communicator from the other participant 


Question: Can | game this? 
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We submitted numerous questions to GCHQ, including: (1) Does GCHQ 
in fact engage in “false flag operations” where material is posted to the 
Internet and falsely attributed to someone else?; (2) Does GCHQ engage 
in efforts to influence or manipulate political discourse online?; and (3) 
Does GCHQ’s mandate include targeting common criminals (such as 
boiler room operators), or only foreign threats? 


As usual, they ignored those questions and opted instead to send their 
vague and nonresponsive boilerplate: “It is a longstanding policy that 
we do not comment on intelligence matters. Furthermore, all of 
GCHQ’s work is carried out in accordance with a strict legal and policy 
framework which ensures that our activities are authorised, necessary 
and proportionate, and that there is rigorous oversight, including from 
the Secretary of State, the Interception and Intelligence Services 
Commissioners and the Parliamentary Intelligence and Security 
Committee. All our operational processes rigorously support this 
position.” 
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These agencies’ refusal to “comment on intelligence matters” - 
meaning: talk at all about anything and everything they do - is 
precisely why whistleblowing is so urgent, the journalism that supports 
it so clearly in the public interest, and the increasingly unhinged 
attacks by these agencies so easy to understand. Claims that 
government agencies are infiltrating online communities and engaging 
in “false flag operations” to discredit targets are often dismissed as 
conspiracy theories, but these documents leave no doubt they are doing 
precisely that. 


Whatever else is true, no government should be able to engage in these 
tactics: what justification is there for having government agencies 
target people - who have been charged with no crime - for reputation- 
destruction, infiltrate online political communities, and develop 
techniques for manipulating online discourse? But to allow those 
actions with no public knowledge or accountability is particularly 
unjustifiable. 


Documents referenced in this article: 


e The Art of Deception: Training for a New Generation of Online Covert 
Operations 
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WAIT! BEFORE YOU GO on about your day, ask yourself: How likely is it that t 
you just read would have been produced by a different news outlet if The Interc 
hadn’t done it? 


Consider what the world of media would look like without The Intercept. Who 
hold party elites accountable to the values they proclaim to have? How many cc 
miscarriages of justice, and dystopian technologies would remain hidden if our 
weren't on the beat? 


The kind of reporting we do is essential to democracy, but it is not easy, cheap, 
profitable. The Intercept is an independent nonprofit news outlet. We don’t hav 
we depend on our members to help us hold the powerful to account. Joining is 
and doesn’t need to cost a lot: You can become a sustaining member for as little 
$5 a month. That’s all it takes to support the journalism you rely on. 


We’re independent of corporate interests. Will you help us? 


CONTACT THE AUTHOR: 


https://theintercept.com/2014/02/24/jtrig-manipulation/ 16/18 


5/1/24, 1:37 PM How Covert Agents Infiltrate the Internet to Manipulate, Deceive, and Destroy Reputations - The Intercept 


2 Glenn Greenwald 
X glenn. greenwald@theintercept.com 
LATEST STORIES 


intercepted Podcast 
Judith Butler Will Not Co-Sign 
Israel’s Alibi for Genocide 


Intercepted - 6:00 am 


The famed scholar on why reducing 
Hamas to a terrorist label sanctions 
Israel’s war on Palestinians. 


Israel’s War on Gaza 
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A tale of two Americas. 
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campaign has a massive civilian death 
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